Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/wJFeTFfZ0I20ssQlF2cjc_RvBqI.roa
File: wJFeTFfZ0I20ssQlF2cjc_RvBqI.roa (raw, json)
Hash identifier: nvfj5KpValFXClE/HfkRusOnyMq3wqdcRIOTRrHHHQA=
Subject key identifier: C0:91:5E:4C:57:D9:D0:8D:B4:B2:C4:25:17:67:23:73:F4:6F:06:A2
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 019FA8A949FBA3E55E107E191EF4C382AE77
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/wJFeTFfZ0I20ssQlF2cjc_RvBqI.roa
Signing time: Tue 28 Jul 2026 12:18:14 +0000
ROA not before: Tue 28 Jul 2026 12:18:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48031
IP address blocks: 2.57.150.0/24 maxlen: 24
45.142.212.0/24 maxlen: 24
45.152.213.0/24 maxlen: 24
45.152.214.0/24 maxlen: 24
80.64.18.0/24 maxlen: 24
80.64.19.0/24 maxlen: 24
91.213.29.0/24 maxlen: 24
91.220.223.0/24 maxlen: 24
91.239.238.0/24 maxlen: 24
92.63.182.0/24 maxlen: 24
92.63.183.0/24 maxlen: 24
193.8.171.0/24 maxlen: 24
194.156.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:14:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:a9:49:fb:a3:e5:5e:10:7e:19:1e:f4:c3:82:ae:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jul 28 12:18:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c0915e4c57d9d08db4b2c42517672373f46f06a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:fb:7a:2a:eb:00:59:4d:35:8f:8d:a5:19:17:
f4:cb:3a:3f:46:73:1a:12:65:ca:e8:a8:1c:f5:c5:
b6:82:cc:21:78:aa:24:bb:08:a6:dc:95:a2:f5:ac:
c5:0e:f2:0d:59:38:a8:66:7b:73:3c:91:75:74:73:
18:a3:e5:9c:c6:f3:ee:77:a2:a6:51:7f:c2:7f:53:
c5:3b:fe:5f:1c:dc:bc:83:2b:74:5f:72:75:fd:12:
9c:3f:49:8e:c0:10:23:c3:13:fa:31:45:75:01:05:
24:5e:e2:3c:39:70:c4:78:62:31:40:ef:67:6f:c3:
cf:dd:54:d2:a8:39:3d:be:d3:c7:6e:92:27:2f:bd:
30:ab:67:13:db:49:11:34:0b:4b:15:d0:24:7b:dd:
ef:6e:89:dc:f1:1a:b2:d5:89:a8:71:d2:69:d1:22:
f0:7f:ff:cd:e8:44:50:9a:ec:ca:1d:c0:23:6b:8f:
a6:c4:26:44:bd:11:68:b5:1c:14:85:5e:81:d6:bd:
2a:66:85:62:b9:48:d2:c8:75:da:9c:91:16:43:c1:
e9:db:ee:ec:82:19:7a:19:80:4c:99:b5:ee:96:aa:
23:76:67:03:a8:51:db:39:c8:15:4b:cc:3d:17:51:
fc:b3:71:cd:7a:5e:33:fa:c0:77:a5:3d:fe:80:ea:
8e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:91:5E:4C:57:D9:D0:8D:B4:B2:C4:25:17:67:23:73:F4:6F:06:A2
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/wJFeTFfZ0I20ssQlF2cjc_RvBqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.150.0/24
45.142.212.0/24
45.152.213.0-45.152.214.255
80.64.18.0/23
91.213.29.0/24
91.220.223.0/24
91.239.238.0/24
92.63.182.0/23
193.8.171.0/24
194.156.27.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:aa:36:16:81:e3:d3:8a:e8:69:27:0c:ff:d2:56:a7:db:96:
73:d6:d8:a0:d3:7c:77:ae:53:1e:6b:f0:02:a5:fe:4a:f5:17:
b8:c2:eb:c2:15:02:5b:03:95:6d:15:3c:47:5d:a5:94:98:51:
2e:f3:33:1c:75:1e:d8:e0:89:73:d7:3f:86:2f:9b:ec:90:65:
92:11:37:7f:de:ba:a8:2a:36:1f:ae:25:01:03:d3:96:cb:35:
08:f1:24:89:4e:b4:f8:ed:aa:17:b3:a9:63:b6:80:5e:6c:be:
23:14:ad:a1:ec:fc:4a:16:78:d2:c1:b3:d9:90:cf:3b:09:c7:
ed:ce:05:25:e8:04:21:a9:ca:42:11:7c:12:a5:54:be:5e:f1:
66:5b:fc:33:e9:00:e4:57:07:d7:08:1f:16:1b:27:12:3a:3a:
58:29:57:af:f4:58:fa:3d:48:cf:9f:79:9a:38:c4:e2:f9:00:
d8:c9:9c:91:56:f9:d4:7f:74:28:a1:cd:34:0c:21:ba:6f:b2:
e3:e5:d4:7a:18:be:bc:5f:c0:44:f4:99:19:c6:d9:c8:ab:85:
7a:28:65:18:66:72:20:f0:3c:68:c7:53:e9:f5:94:8e:d2:d9:
3d:7e:7d:b9:b0:d4:89:b6:1f:3b:4e:f0:59:31:65:bc:2d:98:
cd:20:8e:e3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:04:13 2026 by rpki-client